Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
File: TPzH4BfCyfdjLacpNHa7fkowNlo.mft (raw, json)
Hash identifier: 4gnYts2Tw1lvat+d7A3be0zgn5nmfggTOdOhXyxwWqE=
Subject key identifier: D7:03:60:B6:80:ED:85:7F:72:1B:EA:0F:68:FA:0D:ED:32:54:8F:95
Authority key identifier: 4C:FC:C7:E0:17:C2:C9:F7:63:2D:A7:29:34:76:BB:7E:4A:30:36:5A
Certificate issuer: /CN=4cfcc7e017c2c9f7632da7293476bb7e4a30365a
Certificate serial: 019511349DD92D1BEC3FCA77B479D136B2CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
Manifest number: 1458
Signing time: Mon 17 Feb 2025 00:00:15 +0000
Manifest this update: Mon 17 Feb 2025 00:00:15 +0000
Manifest next update: Tue 18 Feb 2025 00:00:15 +0000
Files and hashes: 1: OQKKfCP8SjNyLo9484epfP4wbRU.roa (hash: GIFqkdSx0szCVRVxH/rU2b7Y/JXh/nneSVo+VlwXpJY=)
2: TPzH4BfCyfdjLacpNHa7fkowNlo.crl (hash: QEA75tMG3xQJ8Fg9Pmu1k+E47SDhjqnFYBz112KOxug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:9d:d9:2d:1b:ec:3f:ca:77:b4:79:d1:36:b2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cfcc7e017c2c9f7632da7293476bb7e4a30365a
Validity
Not Before: Feb 17 00:00:15 2025 GMT
Not After : Feb 18 00:00:15 2025 GMT
Subject: CN=d70360b680ed857f721bea0f68fa0ded32548f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7f:93:19:5a:3f:65:54:a2:78:27:b0:89:94:
3c:c7:e0:04:cc:95:1c:82:b7:26:29:d3:90:a2:69:
4c:cf:15:fb:c4:bc:f9:a9:5e:78:ca:c0:dd:9e:c9:
c6:d2:a0:7f:a9:64:03:f4:00:b4:3b:0a:40:64:df:
19:e5:65:fc:04:50:01:21:2a:76:bc:bf:43:f1:86:
05:f4:d1:c6:fe:21:de:7e:23:d3:b9:3d:ca:50:ea:
60:fb:62:a4:3c:f7:f4:4b:3c:ad:91:b2:e4:91:35:
3f:24:39:70:ae:63:77:88:6e:aa:cc:39:87:c3:d8:
e2:7a:37:9a:10:f4:3c:27:ad:e4:63:79:cb:e3:cc:
a6:25:f3:bf:78:53:54:0d:f7:c2:93:84:a6:60:39:
b0:ee:36:83:f7:e3:7c:72:01:72:f0:04:f5:27:28:
d1:37:e5:9d:6b:b2:32:6f:0a:61:6a:a5:ba:00:40:
29:51:c3:fc:c2:58:60:1e:7d:15:56:94:98:4b:79:
04:f2:1c:9d:87:55:f5:17:5c:fd:f4:31:b5:60:13:
a5:51:aa:98:c6:ae:49:ed:07:7f:28:15:78:4d:b0:
33:ae:fa:93:02:64:f9:ef:57:88:af:a6:b8:b6:91:
e0:38:1b:e5:5a:f8:db:8d:98:be:8a:52:b6:a7:eb:
2d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:03:60:B6:80:ED:85:7F:72:1B:EA:0F:68:FA:0D:ED:32:54:8F:95
X509v3 Authority Key Identifier:
keyid:4C:FC:C7:E0:17:C2:C9:F7:63:2D:A7:29:34:76:BB:7E:4A:30:36:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:04:ed:b2:d7:5a:2a:bf:c4:7a:f3:a1:85:3c:89:12:c8:fb:
33:6c:54:19:fc:70:6f:7b:9b:ac:0e:19:a6:fc:b6:85:3d:51:
2e:63:9c:bd:4e:1e:ca:a1:54:19:97:d7:a8:fa:4e:bd:cf:87:
05:01:5a:d9:16:dd:48:5b:ba:ea:6a:50:5d:55:e1:ef:55:96:
1c:0c:28:6d:15:5f:d7:3b:84:69:42:82:48:73:7e:68:44:50:
f8:b1:0f:14:c4:d6:12:09:3e:40:5a:d7:e5:ea:7b:b8:90:69:
d8:e8:65:d6:d9:1d:1d:ca:d6:5e:95:0d:e9:10:ed:89:46:fe:
a1:5f:1e:f1:5a:da:5c:83:7a:7a:0c:d1:18:d6:ae:13:d5:2a:
09:d1:fa:22:44:7c:d4:47:4e:60:3c:79:f5:f9:b3:b9:7f:a5:
a7:1c:97:4c:77:74:17:0b:91:76:b7:9b:75:1a:68:9c:92:7a:
98:67:2f:8c:63:ca:3a:b4:a4:b0:74:23:12:57:a5:dd:22:0a:
6f:ca:43:15:f9:cf:f3:e1:d8:a9:e5:d2:89:ac:f9:9c:7b:83:
d7:b4:78:9a:9f:a3:5a:ec:66:dd:b9:36:06:ca:6c:4b:3d:14:
83:9f:da:ab:84:9b:e9:a5:86:06:1e:b7:f8:65:86:0f:21:43:
bd:78:fe:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:17 2025 by rpki-client